JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

36.68.52.79

Neutral Activity

Abuse confidence score ?

0% Low Risk

18 reports

11 reporters · latest 4 weeks ago

ISP	PT TELKOM INDONESIA
Usage Type	Fixed Line ISP
ASN	AS7713
Domain Name	telkom.co.id
Country	🇮🇩 Indonesia
City	Pekalongan, Central Java

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 36.68.52.79

This IP address has been reported a total of 18 times from 11 distinct sources. 36.68.52.79 was first reported on May 5th 2021, and the most recent report was 4 weeks ago. In the last 60 days, the only reporter location was: Chile with 1 report. The only category in these recent reports was: Bad Web Bot 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇱 CTMAN dev	2026-08-24 09:21:13 (4 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from ID. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET ... show more Triggered Cloudflare WAF (firewallCustom) from ID. Action: MANAGED_CHALLENGE \| Protocol: HTTP/2 (GET) \| Endpoint: /products/honor-6-gb-x7d-smartphone-2 \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 milcraft.nl	2026-05-14 00:03:53 (4 months ago)	Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi ... show more Suspicious WooCommerce query combination detected. Not default available on websites. Matched combi patterns: filter_, add-to-cart=, orderby=, product_count=. Activity is consistent with high-volume request abuse. show less	DDoS Attack Web App Attack
🇮🇩 hermawan	2026-03-07 16:46:03 (6 months ago)	03/07/2026-23:44:51.491653 [Drop] [] [1:912847:5] ET SCAN Possible robots.txt [] [Classificati ... show more 03/07/2026-23:44:51.491653 [Drop] [] [1:912847:5] ET SCAN Possible robots.txt [] [Classification: Attempted Administrator Privilege Gain] [Priority: 3] {TCP} 36.68.52.79:4268 -> 103.166.156.58:80 ... show less	Email Spam Hacking
🇪🇸 el-brujo	2025-12-23 05:10:00 (8 months ago)	DDoS Attack Layer 7	DDoS Attack
🇷🇸 Smel	2025-10-30 03:52:44 (10 months ago)	Unauthorized Probe/Connection, Hack -	Port Scan Hacking
🇮🇩 hermawan	2025-10-10 14:37:53 (11 months ago)	[Fri Oct 10 20:16:18.565527 2025] [security2:error] [pid 1020183:tid 139974019548864] [client 36.68. ... show more [Fri Oct 10 20:16:18.565527 2025] [security2:error] [pid 1020183:tid 139974019548864] [client 36.68.52.79:17353] ModSecurity: Access denied with code 403 (phase 1). Match of "pm matomo.staklim-malang.info " against "SERVER_NAME" required. [file "/etc/modsecurity/coreruleset-4.16.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "164"] [id "440235"] [msg "BAD REQUEST Bro"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: %3a found within SERVER_NAME: staklim-malang.info request_line = GET /index.php/profil/arsip-artikel?catid=475&id=1123%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-30-agustus-5-september-2016&start=60 HTTP/2.0 Request URI RAW = /index.php/profil/arsip-artikel?catid=475&id=1123%3Aprakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan-berlaku-tanggal-30-agustus-5-septemb..."] [hostname "staklim-malang.info"] [uri "/index.php/profil/arsip-artikel"] [unique_id "aOkHIhEShbV7xT ... show less	Hacking Web App Attack
🇳🇱 exxos	2025-09-23 15:03:01 (11 months ago)	Attacks with Bad user agents	Hacking
🇳🇱 exxos	2025-09-23 11:05:38 (11 months ago)	Attacks with Bad user agents	Hacking
🇷🇸 Smel	2025-06-29 13:03:03 (1 year ago)	Unauthorized Probe/Connection, Hack -	Port Scan Hacking
🇮🇩 hermawan	2024-03-25 15:46:52 (2 years ago)	[Mon Mar 25 22:46:49.979544 2024] [security2:error] [pid 164684:tid 124339259180608] [client 36.68.5 ... show more [Mon Mar 25 22:46:49.979544 2024] [security2:error] [pid 164684:tid 124339259180608] [client 36.68.52.79:6194] [client 36.68.52.79] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i),.?[\\"'\\\\)0-9`-f][\\"'`](?:[\\"'`].?[\\"'`]\|(?:\\\\r?\\\\n)?\\\\z\|[^\\"'`]+)\|[^0-9A-Z_a-z]select.+[^0-9A-Z_a-z]?from\|(?:alter\|(?:(?:cre\|trunc\|upd)at\|renam)e\|d(?:e(?:lete\|sc)\|rop)\|(?:inser\|selec)t\|load)[\\\\s\\\\v]?\\\\([\\\\s\\\\v]?space[\\\\s\\\\v]?\\\\(" at REQUEST_HEADERS:User-Agent. [file "/etc/modsecurity/coreruleset-4.0.0/rules/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "2081"] [id "942200"] [msg "Detects MySQL comment-/space-obfuscated injections and backtick termination"] [data "Matched Data: , like Gecko) Version/4.0 Chrome/121.0.6167.144 Mobile Safari/537.36 OcIdWebView ({\\x22os\\x22:\\x22Android\\x22, found within REQUEST_HEADERS:User-Agent: Mozilla/5.0 (Linux; Android 11; M2007J20CG Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 ... show less	Hacking Web App Attack
🇩🇪 niceshops.com	2023-04-06 03:09:00 (3 years ago)	Web Attack (Apr 23 05:08:59 ScriptKiddie: request for /wp-login.php )	SQL Injection Brute-Force Bad Web Bot Web App Attack
🇺🇦 SWF	2021-07-02 02:49:05 (5 years ago)	Port scanning	Port Scan Hacking
🇵🇱 ChillScanner	2021-06-27 15:39:04 (5 years ago)	1 probe(s) @ TCP(8080)	Port Scan
🇿🇦 IrisFlower	2021-06-26 08:39:51 (5 years ago)	Unauthorized connection attempt detected from IP address 36.68.52.79 to port 8080 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2021-06-25 09:40:56 (5 years ago)	Unauthorized connection attempt detected from IP address 36.68.52.79 to port 8080 [J]	Port Scan Hacking

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 164.92.232.89

🇸🇦 79.72.3.119

🇳🇱 45.148.10.240

🇩🇪 194.88.98.110

🇸🇪 171.25.158.70

🇿🇦 165.16.166.156

🇺🇸 161.35.225.84

🇮🇳 154.29.231.201

🇺🇸 146.190.154.236

🇻🇳 125.212.235.194

🇺🇸 91.230.168.140

🇬🇷 62.38.20.61

🇭🇰 45.153.129.182

🇺🇦 45.12.24.166

🇵🇰 39.45.18.28

🇺🇸 34.10.34.73

🇹🇳 197.0.111.110

🇺🇦 188.124.228.197

🇵🇰 182.190.190.21

🇲🇽 179.238.61.3